Penetration Testing mailing list archives

RE: Network Mapping/Discovery


From: "Noonan, Wesley" <Wesley_Noonan () bmc com>
Date: Mon, 2 Jun 2003 11:10:52 -0500

Since some of these other retail products are being thrown around, I will
throw PATROL Visualis[1][2] out there as well. I don't think that NNM does a
very good job of Layer 2 topology discovery, but I know that Visualis does.
It's been a while since I looked at Spectrum, so I can't speak to that. As
mentioned though, none of the retail products fall into the category I would
call "inexpensive", and most bring topology to the table as a component of
their functionality. Thanks.

Wes Noonan, MCSE/CCNA/CCDA/NNCSS/Security+
Senior QA Rep.
BMC Software, Inc.
(713) 918-2412
wnoonan () bmc com
http://www.bmc.com

[1] As the sig would imply, I work for BMC Software, Inc. and I happen to
work on our network management platforms which would include PATROL
Visualis.
[2]http://www.bmc.com/products/proddocview/0,2832,19052_19426_26272_8024,00.
html (url will wrap)

-----Original Message-----
From: Javier Fernandez-Sanguino [mailto:jfernandez () germinus com]
Sent: Monday, June 02, 2003 02:49
To: Mark Squire
Cc: pen-test () securityfocus com
Subject: Re: Network Mapping/Discovery

Mark Squire wrote:
Hi all,
I thought Cheops would do this, but it doesn't do as well as I thought.
I want to find out what computers are connected to which switches.  I
don't care if it tells me what type of switch it is, but accurately tell
me what IP addresses are hanging off it.  Is there a mapping software
out there that will discover this stuff?

Yes. The usual network management software such as HP Openview's Network
Node Manager, Aprisma's Spectrum. Quite expensive, though. I have not
used Nagios [1] for network discovery in this respect but it just might
have a plugin to represent a network in the way you require. Nedi [2],
seems to do just this (check out the 'simulation' in the link below) but
I have not tested in a pen-test environment yet (it probably needs the
SNMP communities to retrieve the information from switches and routers)

Regards

Javi

[1] www.nagios.org
[2] http://nedi.web.psi.ch/


--------------------------------------------------------------------------
-
--------------------------------------------------------------------------
--

---------------------------------------------------------------------------
----------------------------------------------------------------------------


Current thread: